This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa
File: VM-fKezFR4SnE_FueP0yvublPPU.roa (raw, json)
Hash identifier: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=
Subject key identifier: 54:CF:9F:29:EC:C5:47:84:A7:13:F1:6E:78:FD:32:BE:E6:E5:3C:F5
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 019B7DC9D1CE0D09D96F50C50F8544E3C703
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa
Signing time: Fri 02 Jan 2026 08:18:56 +0000
ROA not before: Fri 02 Jan 2026 08:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196721
IP address blocks: 212.6.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:d1:ce:0d:09:d9:6f:50:c5:0f:85:44:e3:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Jan 2 08:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54cf9f29ecc54784a713f16e78fd32bee6e53cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:ec:ae:a0:39:7b:89:c8:79:d4:34:de:aa:
02:c4:aa:ba:fe:f2:26:4e:2d:07:0d:9f:81:27:48:
2c:4d:f1:37:ad:df:e2:46:64:be:6a:11:13:19:53:
57:f7:a1:24:60:5f:45:ee:59:87:32:94:85:fb:63:
c1:2e:1e:42:a2:77:3a:3f:56:bb:30:5e:b6:9d:c5:
a9:48:0f:96:8f:04:f2:7e:de:14:03:68:60:1a:f9:
84:55:65:ca:15:f2:60:24:7d:d0:82:4a:20:74:45:
63:58:bd:1a:ba:7e:dd:00:cf:52:95:c8:97:58:0a:
da:60:2a:ec:c7:a4:d1:07:f4:1c:44:e0:6a:9d:5e:
86:57:0f:1e:9b:59:bf:33:27:44:38:c3:cd:7b:bd:
f9:ec:24:5d:9d:85:77:c4:5a:75:c7:bd:e6:15:74:
07:9c:da:19:aa:85:61:48:d9:95:c8:db:ad:4c:6e:
84:9d:94:a5:fa:94:18:29:03:ff:28:3f:31:1b:f3:
71:29:87:80:06:2a:dc:02:66:0a:32:03:43:22:e7:
22:9e:27:a7:8f:54:bb:73:3b:45:f3:df:e7:39:29:
28:d3:80:43:d1:bc:18:45:e4:cb:de:b8:08:3d:be:
87:f5:9c:37:d6:a1:a2:2f:57:c8:9d:6e:97:72:d0:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CF:9F:29:EC:C5:47:84:A7:13:F1:6E:78:FD:32:BE:E6:E5:3C:F5
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:dc:f0:7b:9a:7c:85:b8:6f:6b:ee:22:b5:9a:22:f0:f1:46:
75:c0:15:8b:36:78:27:8c:53:60:08:00:2f:8d:0b:f0:54:a6:
1e:73:85:03:63:eb:3c:94:0b:82:87:78:5b:ab:2e:11:28:d2:
47:b4:00:b0:e7:35:d3:a9:7a:44:7b:25:48:c7:55:3f:09:6d:
b6:61:50:cb:eb:b3:46:bc:d6:4f:7d:34:fb:18:da:16:65:da:
12:78:ce:36:3b:ba:f9:8a:13:2a:40:8d:6c:84:34:e9:d3:ec:
87:47:36:e8:1f:ff:d0:e4:7a:3a:86:e6:84:e7:d4:89:06:67:
00:b6:b4:d6:f2:2c:e7:ec:03:47:8d:69:3b:92:5d:4e:3a:39:
e7:0e:e4:8d:16:88:f5:ab:32:08:f7:04:2a:1b:c7:79:17:9e:
18:3c:41:27:14:35:8a:90:c9:a4:16:c0:2d:13:77:a2:fc:b5:
71:9f:13:27:16:67:29:06:fa:73:18:16:97:7a:05:48:cc:4e:
d8:39:20:42:3b:78:c3:3e:13:8c:8f:eb:84:11:b7:83:c7:23:
93:c5:37:87:b0:ea:73:c3:a4:2e:7e:fc:6c:c4:86:b1:e6:7d:
2c:82:e4:3a:18:e5:0e:f3:b6:9a:11:11:d8:ff:ab:86:b5:a6:
f6:a7:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:27 2026 by rpki-client